Intrusion PreventionSchneider.Electric.Modicon.M580.0x20.Offset.Out.of.Bounds.Read
Description
This indicates an attack attempt against an Information Disclosure vulnerability in Schneider Electric Modicon M580.
The vulnerability is caused by a design issue when the vulnerable software handles crafted Modbus requests. A remote attacker may be able to exploit this to cause an out-of-bounds read leading to information disclosure on the affected system, via a series of crafted Modbus requests.
Affected Products
Schneider Electric Modicon M580
Schneider Electric Modicon M340
Schneider Electric Modicon Quantum
Schneider Electric Modicon Premium
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 48110 |
| Created | Jul 04, 2019 |
| Updated | May 02, 2022 |
| Risk |
|
| CVE ID | CVE-2018-7845 |
| Exploit Prediction Score | 0.26% |
| Default Action | drop |
| Active | |
| Affected OS | Other |
| Affected App | SCADA |